--file-patterns doesn't match kubernetes manifests

[lsoumille]

Description

In our CI we are scanning Kubernetes manifest after an helm template (file names end with.tpl). We used to make this check with this command trivy fs --security-checks config -d --policy /trivy/my_policies/ --namespaces mycompany --file-patterns "yaml:.*.tpl" home.
After upgrading to version 0.31.1 (tested also for 0.32.1), trivy doesn't detect config files ending in .tpl

Trivy output:

2022-10-20T14:21:03.119Z        DEBUG   Severities: ["UNKNOWN" "LOW" "MEDIUM" "HIGH" "CRITICAL"]
2022-10-20T14:21:03.123Z        DEBUG   cache dir:  /root/.cache/trivy
2022-10-20T14:21:03.124Z        INFO    Misconfiguration scanning is enabled
2022-10-20T14:21:03.126Z        DEBUG   OS is not detected.
2022-10-20T14:21:03.127Z        INFO    Detected config files: 0

What did you expect to happen?

I would expect to trivy to detect the configuration files

What happened instead?

Trivy did not detect kubernetes files.

Output of run with -debug:

2022-10-20T14:21:03.119Z        DEBUG   Severities: ["UNKNOWN" "LOW" "MEDIUM" "HIGH" "CRITICAL"]
2022-10-20T14:21:03.123Z        DEBUG   cache dir:  /root/.cache/trivy
2022-10-20T14:21:03.124Z        INFO    Misconfiguration scanning is enabled
2022-10-20T14:21:03.126Z        DEBUG   OS is not detected.
2022-10-20T14:21:03.127Z        INFO    Detected config files: 0

Output of trivy -v:

2022-10-20T14:26:32.285Z        INFO    Misconfiguration scanning is enabled
2022-10-20T14:26:32.293Z        INFO    Detected config files: 0

Additional details (base image name, container registry info...):

We are using official docker images.

I have also tested with example files https://github.com/aquasecurity/trivy/tree/f3f302901476663b3edef629f5915236cce98bd4/examples/misconf/file-patterns/configs

[knqyf263]

After this change, I think the file pattern for k8s should be --file-patterns "kubernetes:.*.tpl".
@simar7 Can you please take a look? And please update the documentation if needed.

[simar7]

Yeah that's right. I've updated the doc here with a PR. #4435